c94764bcfa- update to 25.1.0: * Attempting using any methods that mutate an OpenSSL.SSL.Context after it has been used to create an OpenSSL.SSL.Connection will emit a warning. In a future release, this will raise an exception. * cryptography maximum version has been increased to 45.0.x.
devel
Dirk Mueller2025-07-12 17:23:58 +00:00
b1405533ee- dont use suse version for the dist info handling as people can build with newer setuptools on older distrosMatej Cepl2025-04-19 16:00:03 +00:00
9e2c2e4277Accepting request 1266172 from devel:languages:pythonAna Guerrero2025-04-16 18:37:09 +00:00
28a1e305e8- Wrap the metadata directory name in a distro-based conditionalMarkéta Machová2025-04-01 13:15:42 +00:00
3799fc3dc0Accepting request 1237806 from devel:languages:pythonAna Guerrero2025-01-15 16:42:18 +00:00
28aa3af438- Do not build tests noarch: they refer to %__isa, which differs per architecture, invalidating the noarch option. Fixes build with rpm 4.20.Nico Krapp2025-01-14 13:26:13 +00:00
ed2ff5e79d- 24.2.1: * Deprecated OpenSSL.crypto.X509Req, OpenSSL.crypto.load_certificate_request, OpenSSL.crypto.dump_certificate_request. Instead, cryptography.x509.CertificateSigningRequest,s cryptography.x509.CertificateSigningRequestBuilder,s cryptography.x509.load_der_x509_csr,s or cryptography.x509.load_pem_x509_csr should be used. * Added type hints for the SSL module. #1308. * Changed OpenSSL.crypto.PKey.from_cryptography_key to accept public and private EC, ED25519, ED448 keysMarkéta Machová2024-07-24 10:28:52 +00:00
c951fa72dfAccepting request 1158475 from devel:languages:pythonAna Guerrero2024-03-18 15:44:24 +00:00
1d6a5e867b- update to 24.1.0: * Removed the deprecated OpenSSL.crypto.PKCS12 and OpenSSL.crypto.NetscapeSPKI. OpenSSL.crypto.PKCS12 may be replaced by the PKCS#12 APIs in the cryptography package.Dirk Mueller2024-03-16 13:06:38 +00:00
225bd52449Accepting request 1142651 from devel:languages:pythonAna Guerrero2024-01-30 17:24:28 +00:00
8e26884f20- update to 24.0.0: * Added OpenSSL.SSL.Connection.get_selected_srtp_profile to determine which SRTP profile was negotiated. #1279.Dirk Mueller2024-01-29 21:23:44 +00:00
92216e2e79Accepting request 1129059 from devel:languages:pythonAna Guerrero2023-11-28 21:18:04 +00:00
91036534b4- update to 23.3.0: * Dropped support for Python 3.6. * The minimum `cryptography version is now 41.0.5. * Removed OpenSSL.crypto.loads_pkcs7 and OpenSSL.crypto.loads_pkcs12 which had been deprecated for 3 years. * Added OpenSSL.SSL.OP_LEGACY_SERVER_CONNECT to allow legacy insecure renegotiation between OpenSSL and unpatched servers. * Deprecated OpenSSL.crypto.PKCS12 (which was intended to have been deprecated at the same time as OpenSSL.crypto.load_pkcs12). * Deprecated OpenSSL.crypto.NetscapeSPKI. * Deprecated OpenSSL.crypto.CRL * Deprecated OpenSSL.crypto.Revoked * Deprecated OpenSSL.crypto.load_crl and OpenSSL.crypto.dump_crl * Deprecated OpenSSL.crypto.sign and OpenSSL.crypto.verify * Deprecated OpenSSL.crypto.X509Extension * Changed OpenSSL.crypto.X509Store.add_crl to also accept * cryptography's x509.CertificateRevocationList arguments in addition * to the now deprecated OpenSSL.crypto.CRL arguments. * Fixed test_set_default_verify_paths` test so that it is skipped if no network connection is available. - Inject multibuild to avoid a build loop. python-pyOpenSSL-always-overflow.patch - fixed doc generation -Add bug-lp-1265482.diff; fix testsuite for SLE11 (bnc#855666)Dirk Mueller2023-11-27 08:55:08 +00:00
e6e57d5255- update to 23.2.0: * Removed `X509StoreFlags.NOTIFY_POLICY. * cryptography maximum version has been increased to 41.0.x. * Invalid versions are now rejected in OpenSSL.crypto.X509Req.set_version. * Added X509VerificationCodes to OpenSSL.SSL`.Dirk Mueller2023-06-19 20:26:28 +00:00
a0d6178494- update to 23.1.1: * Worked around an issue in OpenSSL 3.1.0 which caused X509Extension.get_short_name to raise an exception when no short name was known to OpenSSL.Dirk Mueller2023-03-28 15:40:57 +00:00
93b1e4678c- update to 23.1.0: * `cryptography maximum version has been increased to 40.0.x. * Add OpenSSL.SSL.Connection.DTLSv1_get_timeout and OpenSSL.SSL.Connection.DTLSv1_handle_timeout to support DTLS timeouts #1180Dirk Mueller2023-03-27 07:55:49 +00:00
f0708814a1- update to 23.0.0: * Add `OpenSSL.SSL.X509StoreFlags.PARTIAL_CHAIN constant to allow for users to perform certificate verification on partial certificate chains. * cryptography` maximum version has been increased to 39.0.x. - drop pyOpenSSL-pr1158-conditional-__all__.patch (upstream)Dirk Mueller2023-01-02 18:49:48 +00:00
b067fdba7dAccepting request 1030427 from home:bnavigator:branches:devel:languages:pythonMatej Cepl2022-10-24 21:44:16 +00:00
fcf55eaaab- update to 22.1.0: * Remove support for SSLv2 and SSLv3. * The minimum `cryptography version is now 37.0.2. * The OpenSSL.crypto.X509StoreContextError exception has been refactored, changing its internal attributes. * Add OpenSSL.SSL.Connection.set_verify and OpenSSL.SSL.Connection.get_verify_mode to override the context object's verification flags. * Add OpenSSL.SSL.Connection.use_certificate and OpenSSL.SSL.Connection.use_privatekey` to set a certificate per connection (and not just per context)Dirk Mueller2022-09-29 19:34:28 +00:00
76cf59019d- Add check_inv_ALPN_lists.patch checks for invalid ALPN lists before calling OpenSSL (gh#pyca/pyopenssl#1056).Matej Cepl2021-10-30 19:09:36 +00:00
032b476820- update to 21.0.0: - The minimum `cryptography version is now 3.3. - Drop support for Python 3.5 - Raise an error when an invalid ALPN value is set. - Added OpenSSL.SSL.Context.set_min_proto_version and OpenSSL.SSL.Context.set_max_proto_version - Updated to_cryptography and from_cryptography methods to support an upcoming release of cryptography` without raising deprecation warnings.Dirk Mueller2021-10-26 20:28:09 +00:00
027e381015- Adjust metadata for skip-networked-test.patch and refer to the proper upstream ticket gh#pyca/pyopenssl#68.Matej Cepl2020-12-22 22:29:19 +00:00
d631fa8ab1- update to 19.0 - fixed build deps. - drop patches: openssl-1.1.0i.patch openssl-1.1.1.patch opensuse_ca.patch tls13-renegotiation.patch * X509Store.add_cert no longer raises an error if you add a duplicate cert. * pyOpenSSL now works with OpenSSL 1.1.1. * pyOpenSSL now handles NUL bytes in X509Name.get_components()Ondřej Súkup2019-03-02 16:33:31 +00:00
673132b30cAccepting request 680621 from home:frispete:python
Tomáš Chvátal
2019-03-01 19:38:20 +00:00
488c650d8dAccepting request 679175 from devel:languages:python
Stephan Kulow
2019-03-01 19:28:38 +00:00
ef709a81f0Accepting request 679046 from home:TheBlackCat:branches:devel:languages:python
Tomáš Chvátal
2019-02-26 08:50:40 +00:00
7222fe2030Accepting request 671988 from home:frispete:pythonMatej Cepl2019-02-06 08:55:31 +00:00
a508fd04ad- Add patch to work with openssl 1.1.0i+: * openssl-1.1.0i.patch
Tomáš Chvátal
2018-08-24 09:10:42 +00:00
071b74d8a2- Update to 18.0.0: * Update for new openssl 1.1.1 - Remove not needed patches: * bug-lp-1265482.diff * rsa128-i586.patch
Tomáš Chvátal
2018-08-16 15:55:53 +00:00
fafea12932- Update to 17.5.0: * The minimum cryptography version is now 2.1.4. * Fixed various memory leaks * Various fuzz fixes * See CHANGELOG.rst
Tomáš Chvátal
2018-02-02 11:41:11 +00:00
Dominique Leuenberger
Dirk Mueller
Matej Cepl
Ana Guerrero
Markéta Machová
Steve Kowalik
Nico Krapp
Tomáš Chvátal
Ondřej Súkup
Stephan Kulow
Jan Matejek
Todd R